Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137372e31312e35362e302f32322d3234203d3e20323634333831.roa
File:                     3137372e31312e35362e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          BNvxBpnJmmvxh+RAURZAKMQWXw9qY1UMFRSlWEP2N+s=
Subject key identifier:   BD:44:3D:75:8E:D1:FE:D2:A6:50:D8:9A:39:D7:13:C9:76:BB:89:3A
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       2ACF69F3DFD9DFA794B65C023DBB7D0F92B64C52
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137372e31312e35362e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 06 Mar 2025 13:45:54 +0000
ROA not before:           Thu 06 Mar 2025 13:40:54 +0000
ROA not after:            Thu 05 Mar 2026 13:45:54 +0000
asID:                     264381
IP address blocks:        177.11.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cf:69:f3:df:d9:df:a7:94:b6:5c:02:3d:bb:7d:0f:92:b6:4c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Mar  6 13:40:54 2025 GMT
            Not After : Mar  5 13:45:54 2026 GMT
        Subject: CN=BD443D758ED1FED2A650D89A39D713C976BB893A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:6e:f1:7d:1d:5c:c7:58:14:b0:b5:56:fb:
                    ef:fd:3b:0b:94:87:22:96:c0:3b:99:c2:20:08:4c:
                    65:77:c5:01:73:8e:68:5e:df:fd:90:e6:cf:7e:cb:
                    81:39:7d:23:50:8d:bc:6a:45:f5:3f:6b:d3:eb:58:
                    8a:13:dd:5c:02:1f:bc:c7:ae:2e:15:28:87:14:b5:
                    35:cc:e1:f5:c5:87:80:4d:b3:42:e2:44:c4:2e:3b:
                    97:22:7e:39:aa:7d:c2:e4:67:34:f7:a3:f1:96:24:
                    10:90:f9:35:8b:b2:ee:13:83:0f:df:76:f1:a1:0e:
                    d3:71:f1:f4:de:b4:40:24:bb:7c:ae:51:bf:6c:ac:
                    68:db:c4:d0:9c:c9:55:3a:51:5c:ff:2d:c8:bb:f1:
                    78:34:b5:5a:c3:bb:84:7b:d3:85:b9:02:60:2a:e5:
                    99:f9:12:58:e8:14:c1:41:b5:97:dd:a8:57:48:a6:
                    65:d6:70:2c:85:e2:0a:f7:63:d9:19:2b:21:40:e4:
                    6c:f7:ac:50:00:fb:a7:6a:14:ce:e3:3c:1a:72:6a:
                    af:5e:c6:b3:e1:b2:89:8e:04:f9:21:c9:57:91:ef:
                    32:e7:ce:c6:1f:68:38:b8:41:da:5a:7a:a1:08:33:
                    a6:36:c1:08:07:fc:ed:a9:16:22:19:22:ff:5e:f5:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:44:3D:75:8E:D1:FE:D2:A6:50:D8:9A:39:D7:13:C9:76:BB:89:3A
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137372e31312e35362e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:35:c7:fb:9c:9d:85:6c:41:db:89:30:f2:62:48:54:29:e8:
         c2:b6:f7:77:68:80:35:dc:1d:52:22:32:8d:c1:52:61:bd:24:
         20:c9:fe:ca:49:b4:48:20:d1:c7:9c:7d:4c:d0:a7:89:47:e9:
         f8:48:e4:a6:c5:15:14:f2:e5:13:d8:d9:27:00:9c:f2:8c:1c:
         ea:16:9c:99:2f:82:39:c4:9d:15:a8:7b:fc:d2:31:bb:9d:63:
         60:71:94:ff:2c:f2:05:e1:c5:20:4b:e1:af:97:3d:53:d3:6b:
         44:de:b8:d1:d4:ae:a9:99:11:18:84:9a:59:77:8b:a5:0a:ee:
         ac:18:68:62:3b:39:1c:33:63:ca:ac:f4:ad:d3:0f:0c:e8:ef:
         44:66:50:65:bd:51:08:f8:d0:36:e9:d5:7b:1c:b6:64:78:18:
         1a:f6:27:2f:9d:f6:2c:63:38:d6:2a:54:dc:c3:27:98:74:f1:
         88:4c:95:9c:89:6f:83:48:36:a4:c5:9f:13:57:5b:6e:31:96:
         6f:29:7f:c2:14:4a:28:bc:8c:04:c1:9a:77:47:62:d7:1c:36:
         80:ca:c1:e1:9e:cd:1f:21:ba:ba:cf:cc:9f:32:c8:af:14:db:
         75:44:c6:df:c5:3f:3f:b6:cf:a0:6c:5a:5e:01:29:3a:7e:ec:
         80:56:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:21:39 2025 by rpki-client